The vulnerability allows a missing authorization flaw in the "Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets" plugin, permitting users who should not have access to trigger data export operations. This can lead to unauthorized disclosure of sensitive e‑commerce information such as orders, products, customers and coupon details, potentially compromising confidentiality and affecting business reputation.

Creative Werk Designs publishes the affected plugin under the name Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets. Versions from the initial release through 1.8.2 are impacted. The issue exists in the export functionality that a site may routinely use to synchronize data with Google Sheets.

The CVSS score of 4.3 reflects a low to medium severity, while the EPSS score below 1% indicates a very low likelihood of real‑world exploitation at this time. The flaw is not yet listed in the CISA KEV catalog. The likely attack vector is inferred to be an unauthenticated or improperly authenticated user exploiting the plugin’s export endpoint, as explicit authorization checks are missing in the code.